Dual-Use Cybercrime Infrastructure Uncovered

Cybersecurity researchers have reported the discovery of a massive online gambling network based in Indonesia that was concurrently operating as a hidden Command and Control (C2) and anonymity infrastructure for malicious actors. The extensive network of domains and servers, built to support a large-scale gambling operation, was repurposed to conceal illicit activities. This dual-use functionality allowed threat actors to leverage the existing infrastructure to manage malware infections and hide their tracks from security analysts and law enforcement.

The operation relied on the high volume of traffic generated by the gambling platforms to act as camouflage. Malicious C2 communications were blended with legitimate-seeming user activity, making the hostile traffic exceptionally difficult to isolate and identify using traditional network security monitoring tools. The primary function of this hidden layer was to issue commands to compromised devices and exfiltrate stolen data under the cover of the gambling network’s regular data flows.

A Network for Anonymity and Evasion

Beyond serving as a C2 network, the infrastructure provided a robust anonymity service for its operators and other threat actors. By routing their traffic through the gambling network’s servers, cybercriminals could effectively obscure the true origin of their attacks and online activities. This proxying capability turned the gambling platform into a shield, significantly complicating attribution efforts.

The researchers’ analysis confirmed that the network’s servers were actively used as exit nodes and intermediaries for various malicious campaigns. The scale of the gambling operation, with its geographically distributed servers and vast IP address space, made it an effective tool for those seeking to evade detection. The discovery highlights the trend of cybercriminals co-opting or building large, seemingly legitimate online platforms to support their operations.

Source: https://www.helpnetsecurity.com/2025/12/03/indonesian-online-gambling-network/